From 5a90ffc0ef6ba2a3b04b8dd82941b2be8bb4cca7 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Wed, 15 Jul 2026 15:50:23 +0900 Subject: [PATCH] Auto Update 2026/07/15 06:50:23 --- 2014/CVE-2014-6271.json | 4 +- 2015/CVE-2015-5254.json | 8 ++-- 2015/CVE-2015-9235.json | 8 ++-- 2016/CVE-2016-10555.json | 8 ++-- 2016/CVE-2016-3088.json | 8 ++-- 2018/CVE-2018-0114.json | 8 ++-- 2019/CVE-2019-1040.json | 4 +- 2020/CVE-2020-0796.json | 8 ++-- 2020/CVE-2020-11898.json | 4 +- 2020/CVE-2020-14008.json | 8 ++-- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-28042.json | 8 ++-- 2021/CVE-2021-1675.json | 8 ++-- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-41773.json | 4 +- 2022/CVE-2022-21445.json | 8 ++-- 2022/CVE-2022-22077.json | 2 +- 2022/CVE-2022-26134.json | 8 ++-- 2022/CVE-2022-29799.json | 4 +- 2022/CVE-2022-41678.json | 8 ++-- 2022/CVE-2022-42889.json | 33 ++++++++++++++ 2023/CVE-2023-25950.json | 8 ++-- 2023/CVE-2023-32233.json | 4 +- 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-46604.json | 8 ++-- 2024/CVE-2024-0044.json | 8 ++-- 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-32114.json | 8 ++-- 2025/CVE-2025-14847.json | 8 ++-- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-26529.json | 8 ++-- 2025/CVE-2025-27591.json | 33 ++++++++++++++ 2025/CVE-2025-29927.json | 8 ++-- 2025/CVE-2025-32463.json | 4 +- 2025/CVE-2025-48907.json | 4 +- 2025/CVE-2025-49844.json | 8 ++-- 2025/CVE-2025-52915.json | 8 ++-- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 28 ++++++------ 2025/CVE-2025-60357.json | 35 +++++++++++++++ 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-68921.json | 4 +- 2026/CVE-2026-0740.json | 8 ++-- 2026/CVE-2026-15409.json | 35 +++++++++++++++ 2026/CVE-2026-15410.json | 35 +++++++++++++++ 2026/CVE-2026-20841.json | 8 ++-- 2026/CVE-2026-24061.json | 4 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-27483.json | 35 +++++++++++++++ 2026/CVE-2026-27944.json | 33 ++++++++++++++ 2026/CVE-2026-31431.json | 8 ++-- 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-34197.json | 8 ++-- 2026/CVE-2026-3609.json | 8 ++-- 2026/CVE-2026-36669.json | 35 +++++++++++++++ 2026/CVE-2026-41089.json | 8 ++-- 2026/CVE-2026-41091.json | 8 ++-- 2026/CVE-2026-41940.json | 16 +++---- 2026/CVE-2026-43499.json | 94 ++++++++++++++++++++++++++++++++++------ 2026/CVE-2026-43724.json | 12 ++--- 2026/CVE-2026-45585.json | 12 ++--- 2026/CVE-2026-48907.json | 4 +- 2026/CVE-2026-50657.json | 46 ++++++++++++++++++++ 2026/CVE-2026-55511.json | 6 +-- README.md | 39 +++++++++++++++++ 68 files changed, 635 insertions(+), 210 deletions(-) create mode 100644 2025/CVE-2025-60357.json create mode 100644 2026/CVE-2026-15409.json create mode 100644 2026/CVE-2026-15410.json create mode 100644 2026/CVE-2026-27483.json create mode 100644 2026/CVE-2026-36669.json create mode 100644 2026/CVE-2026-50657.json diff --git a/2014/CVE-2014-6271.json b/2014/CVE-2014-6271.json index b46a442f93..530d85c9fb 100644 --- a/2014/CVE-2014-6271.json +++ b/2014/CVE-2014-6271.json @@ -2962,8 +2962,8 @@ "description": "its simple Shellshock exploit", "fork": false, "created_at": "2026-04-24T04:26:07Z", - "updated_at": "2026-04-24T04:48:00Z", - "pushed_at": "2026-04-24T04:47:56Z", + "updated_at": "2026-07-15T04:41:51Z", + "pushed_at": "2026-07-15T04:41:47Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2015/CVE-2015-5254.json b/2015/CVE-2015-5254.json index 61715c55d0..f94c148fc9 100644 --- a/2015/CVE-2015-5254.json +++ b/2015/CVE-2015-5254.json @@ -113,10 +113,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 } diff --git a/2015/CVE-2015-9235.json b/2015/CVE-2015-9235.json index b4864e7c91..ede83f5a91 100644 --- a/2015/CVE-2015-9235.json +++ b/2015/CVE-2015-9235.json @@ -92,10 +92,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-06-22T11:04:35Z", + "updated_at": "2026-07-15T05:24:27Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 289, - "watchers_count": 289, + "stargazers_count": 288, + "watchers_count": 288, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -106,7 +106,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 289, + "watchers": 288, "score": 0, "subscribers_count": 4 }, diff --git a/2016/CVE-2016-10555.json b/2016/CVE-2016-10555.json index 1c3adc4475..39fc1aac3e 100644 --- a/2016/CVE-2016-10555.json +++ b/2016/CVE-2016-10555.json @@ -80,10 +80,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-06-22T11:04:35Z", + "updated_at": "2026-07-15T05:24:27Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 289, - "watchers_count": 289, + "stargazers_count": 288, + "watchers_count": 288, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 289, + "watchers": 288, "score": 0, "subscribers_count": 4 } diff --git a/2016/CVE-2016-3088.json b/2016/CVE-2016-3088.json index e2e2719a00..d0b1d4d456 100644 --- a/2016/CVE-2016-3088.json +++ b/2016/CVE-2016-3088.json @@ -249,10 +249,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -263,7 +263,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 } diff --git a/2018/CVE-2018-0114.json b/2018/CVE-2018-0114.json index b229fdf087..574449e2b4 100644 --- a/2018/CVE-2018-0114.json +++ b/2018/CVE-2018-0114.json @@ -344,10 +344,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-06-22T11:04:35Z", + "updated_at": "2026-07-15T05:24:27Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 289, - "watchers_count": 289, + "stargazers_count": 288, + "watchers_count": 288, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -358,7 +358,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 289, + "watchers": 288, "score": 0, "subscribers_count": 4 }, diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index bbb45405c8..c4b2d9d5ec 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-07-15T00:04:39Z", - "pushed_at": "2026-07-15T00:04:35Z", + "updated_at": "2026-07-15T05:53:37Z", + "pushed_at": "2026-07-15T05:53:34Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index eafa34dc2e..fca3e6e10b 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -1103,10 +1103,10 @@ "description": "CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost", "fork": false, "created_at": "2020-03-30T11:42:56Z", - "updated_at": "2026-06-16T08:07:23Z", + "updated_at": "2026-07-15T00:30:31Z", "pushed_at": "2020-12-07T20:04:27Z", - "stargazers_count": 1357, - "watchers_count": 1357, + "stargazers_count": 1356, + "watchers_count": 1356, "has_discussions": false, "forks_count": 340, "allow_forking": true, @@ -1123,7 +1123,7 @@ ], "visibility": "public", "forks": 340, - "watchers": 1357, + "watchers": 1356, "score": 0, "subscribers_count": 31 }, diff --git a/2020/CVE-2020-11898.json b/2020/CVE-2020-11898.json index 571dce8547..4424898985 100644 --- a/2020/CVE-2020-11898.json +++ b/2020/CVE-2020-11898.json @@ -14,8 +14,8 @@ "description": "This comprehensive package contains everything needed to detect, analyze, and remediate Ripple20 (CVE-2020-11898) vulnerabilities in your organization.", "fork": false, "created_at": "2026-06-15T11:11:11Z", - "updated_at": "2026-06-15T11:13:12Z", - "pushed_at": "2026-06-15T11:13:08Z", + "updated_at": "2026-07-15T05:22:59Z", + "pushed_at": "2026-07-15T05:22:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-14008.json b/2020/CVE-2020-14008.json index 856664307e..152c5a8086 100644 --- a/2020/CVE-2020-14008.json +++ b/2020/CVE-2020-14008.json @@ -47,10 +47,10 @@ "description": "CVE-2020-14008 - ManageEngine Applications Manager RCE", "fork": false, "created_at": "2026-05-09T15:32:13Z", - "updated_at": "2026-05-28T13:04:40Z", + "updated_at": "2026-07-15T02:24:58Z", "pushed_at": "2026-05-09T15:38:07Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 6923d494d8..5370075c44 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-07-14T23:37:41Z", - "pushed_at": "2026-07-14T23:37:38Z", + "updated_at": "2026-07-15T06:02:14Z", + "pushed_at": "2026-07-15T06:02:06Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-28042.json b/2020/CVE-2020-28042.json index ad3173efdd..250176e146 100644 --- a/2020/CVE-2020-28042.json +++ b/2020/CVE-2020-28042.json @@ -14,10 +14,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-06-22T11:04:35Z", + "updated_at": "2026-07-15T05:24:27Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 289, - "watchers_count": 289, + "stargazers_count": 288, + "watchers_count": 288, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 289, + "watchers": 288, "score": 0, "subscribers_count": 4 } diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index 7a392948b4..bcff4ed5f8 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -1066,10 +1066,10 @@ "description": "Python implementation for PrintNightmare (CVE-2021-1675 \/ CVE-2021-34527)", "fork": false, "created_at": "2021-09-26T13:53:10Z", - "updated_at": "2026-06-25T07:22:46Z", + "updated_at": "2026-07-15T00:30:27Z", "pushed_at": "2021-10-17T13:29:56Z", - "stargazers_count": 210, - "watchers_count": 210, + "stargazers_count": 209, + "watchers_count": 209, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -1083,7 +1083,7 @@ ], "visibility": "public", "forks": 32, - "watchers": 210, + "watchers": 209, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index 5575307b73..e060676c11 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-07-15T00:07:02Z", - "pushed_at": "2026-07-15T00:06:59Z", + "updated_at": "2026-07-15T05:55:49Z", + "pushed_at": "2026-07-15T05:55:45Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index c695223414..894233e8f5 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -4714,8 +4714,8 @@ "description": null, "fork": false, "created_at": "2026-04-25T09:20:19Z", - "updated_at": "2026-04-25T11:06:46Z", - "pushed_at": "2026-04-25T09:27:06Z", + "updated_at": "2026-07-15T04:42:44Z", + "pushed_at": "2026-07-15T04:42:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2022/CVE-2022-21445.json b/2022/CVE-2022-21445.json index 7e3a8a61cd..a5c8378d95 100644 --- a/2022/CVE-2022-21445.json +++ b/2022/CVE-2022-21445.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2024-03-12T04:47:02Z", - "updated_at": "2025-12-12T16:08:42Z", + "updated_at": "2026-07-15T03:32:58Z", "pushed_at": "2024-03-18T07:32:24Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-22077.json b/2022/CVE-2022-22077.json index 4316953321..14537581d5 100644 --- a/2022/CVE-2022-22077.json +++ b/2022/CVE-2022-22077.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2025-09-08T21:12:19Z", "updated_at": "2026-06-19T21:56:25Z", - "pushed_at": "2026-07-14T16:16:55Z", + "pushed_at": "2026-07-15T05:43:42Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 7e301181d3..83b72773db 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -14,10 +14,10 @@ "description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。", "fork": false, "created_at": "2022-05-31T07:44:01Z", - "updated_at": "2026-07-03T12:06:29Z", + "updated_at": "2026-07-15T01:20:08Z", "pushed_at": "2023-02-26T14:06:05Z", - "stargazers_count": 1252, - "watchers_count": 1252, + "stargazers_count": 1253, + "watchers_count": 1253, "has_discussions": true, "forks_count": 187, "allow_forking": true, @@ -48,7 +48,7 @@ ], "visibility": "public", "forks": 187, - "watchers": 1252, + "watchers": 1253, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json index b753b2e13f..9da55ac77f 100644 --- a/2022/CVE-2022-29799.json +++ b/2022/CVE-2022-29799.json @@ -59,8 +59,8 @@ "description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.", "fork": false, "created_at": "2026-06-23T14:05:18Z", - "updated_at": "2026-07-14T21:16:32Z", - "pushed_at": "2026-07-14T21:16:24Z", + "updated_at": "2026-07-15T03:45:52Z", + "pushed_at": "2026-07-15T03:45:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-41678.json b/2022/CVE-2022-41678.json index 570c697d19..845ae99d48 100644 --- a/2022/CVE-2022-41678.json +++ b/2022/CVE-2022-41678.json @@ -88,10 +88,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -102,7 +102,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 } diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index ab4f909723..36be9cd310 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -1690,5 +1690,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1301091165, + "name": "CVE-2022-42889", + "full_name": "Hkaeeeer\/CVE-2022-42889", + "owner": { + "login": "Hkaeeeer", + "id": 161950504, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161950504?v=4", + "html_url": "https:\/\/github.com\/Hkaeeeer", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Hkaeeeer\/CVE-2022-42889", + "description": "exploit for CVE-2022-42889", + "fork": false, + "created_at": "2026-07-15T01:35:55Z", + "updated_at": "2026-07-15T01:46:10Z", + "pushed_at": "2026-07-15T01:46:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-25950.json b/2023/CVE-2023-25950.json index 05ebd2fdb1..7f09d03ad5 100644 --- a/2023/CVE-2023-25950.json +++ b/2023/CVE-2023-25950.json @@ -14,10 +14,10 @@ "description": "HTTP3ONSTEROIDS - A research on CVE-2023-25950 where HAProxy's HTTP\/3 implementation fails to block a malformed HTTP header field name.", "fork": false, "created_at": "2023-07-31T23:57:02Z", - "updated_at": "2025-11-12T21:40:55Z", + "updated_at": "2026-07-15T04:22:36Z", "pushed_at": "2025-08-06T23:01:08Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 } diff --git a/2023/CVE-2023-32233.json b/2023/CVE-2023-32233.json index 44349954e8..68b142e205 100644 --- a/2023/CVE-2023-32233.json +++ b/2023/CVE-2023-32233.json @@ -179,8 +179,8 @@ "description": "Gemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure", "fork": false, "created_at": "2026-05-20T12:58:23Z", - "updated_at": "2026-06-05T12:49:56Z", - "pushed_at": "2026-05-20T13:05:15Z", + "updated_at": "2026-07-15T05:07:47Z", + "pushed_at": "2026-07-15T05:07:43Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index c507808afb..7c4e17908a 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-07-14T23:33:50Z", - "pushed_at": "2026-07-14T23:33:45Z", + "updated_at": "2026-07-15T04:59:27Z", + "pushed_at": "2026-07-15T04:59:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-46604.json b/2023/CVE-2023-46604.json index 54abcecc0b..cfcafdf58e 100644 --- a/2023/CVE-2023-46604.json +++ b/2023/CVE-2023-46604.json @@ -1045,10 +1045,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -1059,7 +1059,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json index a7ee9909b9..e0c48eee71 100644 --- a/2024/CVE-2024-0044.json +++ b/2024/CVE-2024-0044.json @@ -315,10 +315,10 @@ "description": "RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app", "fork": false, "created_at": "2024-09-27T09:02:08Z", - "updated_at": "2026-07-14T20:31:47Z", + "updated_at": "2026-07-15T06:00:54Z", "pushed_at": "2024-09-30T12:48:08Z", - "stargazers_count": 180, - "watchers_count": 180, + "stargazers_count": 182, + "watchers_count": 182, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -329,7 +329,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 180, + "watchers": 182, "score": 0, "subscribers_count": 3 }, diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index 926dc5187c..1505ebcc1e 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -118,8 +118,8 @@ "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-07-15T00:17:59Z", - "pushed_at": "2026-07-15T00:17:55Z", + "updated_at": "2026-07-15T05:44:48Z", + "pushed_at": "2026-07-15T05:44:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-32114.json b/2024/CVE-2024-32114.json index 87d8d24f77..77e8139540 100644 --- a/2024/CVE-2024-32114.json +++ b/2024/CVE-2024-32114.json @@ -14,10 +14,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 } diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index 7ce29af654..14b93ee3fd 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-07-15T00:21:20Z", - "pushed_at": "2026-07-15T00:21:16Z", + "updated_at": "2026-07-15T05:48:12Z", + "pushed_at": "2026-07-15T05:48:08Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-07-15T00:20:35Z", - "pushed_at": "2026-07-15T00:20:32Z", + "updated_at": "2026-07-15T05:47:38Z", + "pushed_at": "2026-07-15T05:47:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 2b875a9a62..8f573961ce 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-07-14T20:51:34Z", - "pushed_at": "2026-07-14T20:51:30Z", + "updated_at": "2026-07-15T06:29:55Z", + "pushed_at": "2026-07-15T06:29:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-26529.json b/2025/CVE-2025-26529.json index a4c2473903..842c73660e 100644 --- a/2025/CVE-2025-26529.json +++ b/2025/CVE-2025-26529.json @@ -14,10 +14,10 @@ "description": "SSRF to XSS - XSS to RCE Moodle", "fork": false, "created_at": "2025-04-12T23:17:40Z", - "updated_at": "2026-07-14T21:41:06Z", + "updated_at": "2026-07-15T05:41:41Z", "pushed_at": "2025-04-13T00:02:26Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 11, + "watchers": 13, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-27591.json b/2025/CVE-2025-27591.json index 4ac1d993d7..65bfd32014 100644 --- a/2025/CVE-2025-27591.json +++ b/2025/CVE-2025-27591.json @@ -556,5 +556,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1301182296, + "name": "CVE-2025-27591-PoC", + "full_name": "MoTechStore\/CVE-2025-27591-PoC", + "owner": { + "login": "MoTechStore", + "id": 53371699, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53371699?v=4", + "html_url": "https:\/\/github.com\/MoTechStore", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MoTechStore\/CVE-2025-27591-PoC", + "description": "# CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept (PoC) demonstrating the local privilege escalation vulnerability identified as **CVE-2025-27591** in **Below**, a Linux system observability tool.", + "fork": false, + "created_at": "2026-07-15T04:07:13Z", + "updated_at": "2026-07-15T04:15:30Z", + "pushed_at": "2026-07-15T04:15:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index 7d43c2e03c..465292df20 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -1106,10 +1106,10 @@ "description": "This repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware.", "fork": false, "created_at": "2025-03-26T00:12:41Z", - "updated_at": "2026-04-17T14:08:15Z", + "updated_at": "2026-07-15T03:35:21Z", "pushed_at": "2026-03-22T19:31:55Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -1133,7 +1133,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 6cb78d2649..ef2b78377b 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -1529,8 +1529,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-07-14T23:39:07Z", - "pushed_at": "2026-07-14T23:39:04Z", + "updated_at": "2026-07-15T05:05:05Z", + "pushed_at": "2026-07-15T05:05:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-48907.json b/2025/CVE-2025-48907.json index bf5bd6463e..f49b06802d 100644 --- a/2025/CVE-2025-48907.json +++ b/2025/CVE-2025-48907.json @@ -19,7 +19,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 148fc9bc29..4a1a64d09e 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-07-14T23:51:16Z", - "pushed_at": "2026-07-14T23:51:12Z", + "updated_at": "2026-07-15T05:17:23Z", + "pushed_at": "2026-07-15T05:17:20Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-07-14T23:51:46Z", - "pushed_at": "2026-07-14T23:51:43Z", + "updated_at": "2026-07-15T05:18:03Z", + "pushed_at": "2026-07-15T05:18:00Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index f9768f5603..757c18fb65 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-07-14T17:12:05Z", + "updated_at": "2026-07-15T03:13:54Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 855, - "watchers_count": 855, + "stargazers_count": 856, + "watchers_count": 856, "has_discussions": false, "forks_count": 125, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 125, - "watchers": 855, + "watchers": 856, "score": 0, "subscribers_count": 20 } diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index e4bf8f6dd3..0439d1e7b3 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-07-14T23:34:23Z", - "pushed_at": "2026-07-14T23:34:19Z", + "updated_at": "2026-07-15T05:00:16Z", + "pushed_at": "2026-07-15T05:00:07Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 59a8e2486a..6b7270e46f 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-07-15T00:11:12Z", - "pushed_at": "2026-07-15T00:11:08Z", + "updated_at": "2026-07-15T05:37:47Z", + "pushed_at": "2026-07-15T05:37:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -99,8 +99,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-07-15T00:11:42Z", - "pushed_at": "2026-07-15T00:11:39Z", + "updated_at": "2026-07-15T05:38:18Z", + "pushed_at": "2026-07-15T05:38:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -148,8 +148,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-07-15T00:11:24Z", - "pushed_at": "2026-07-15T00:11:20Z", + "updated_at": "2026-07-15T05:38:03Z", + "pushed_at": "2026-07-15T05:38:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -3683,10 +3683,10 @@ "description": "This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.", "fork": false, "created_at": "2025-12-05T22:32:32Z", - "updated_at": "2026-07-07T05:40:00Z", + "updated_at": "2026-07-15T03:35:05Z", "pushed_at": "2026-03-22T19:27:58Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": true, "forks_count": 3, "allow_forking": true, @@ -3718,7 +3718,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 1 }, @@ -11741,8 +11741,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-07-15T00:11:06Z", - "pushed_at": "2026-07-15T00:11:03Z", + "updated_at": "2026-07-15T05:37:47Z", + "pushed_at": "2026-07-15T05:37:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12259,8 +12259,8 @@ "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-07-15T00:15:01Z", - "pushed_at": "2026-07-15T00:14:57Z", + "updated_at": "2026-07-15T05:41:43Z", + "pushed_at": "2026-07-15T05:41:39Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-60357.json b/2025/CVE-2025-60357.json new file mode 100644 index 0000000000..9f4b8129f9 --- /dev/null +++ b/2025/CVE-2025-60357.json @@ -0,0 +1,35 @@ +[ + { + "id": 1301218286, + "name": "CVE-2025-60357", + "full_name": "Nullbyte3117\/CVE-2025-60357", + "owner": { + "login": "Nullbyte3117", + "id": 63184945, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63184945?v=4", + "html_url": "https:\/\/github.com\/Nullbyte3117", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Nullbyte3117\/CVE-2025-60357", + "description": "CVE-2025-60357- NoSQL(MongoDB) Injection POC", + "fork": false, + "created_at": "2026-07-15T05:04:18Z", + "updated_at": "2026-07-15T05:05:26Z", + "pushed_at": "2026-07-15T05:05:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index f6fa578964..e5a7e875b4 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-07-14T20:44:37Z", - "pushed_at": "2026-07-14T20:44:32Z", + "updated_at": "2026-07-15T06:24:07Z", + "pushed_at": "2026-07-15T06:24:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 7735ba3235..cea909042c 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-07-15T00:12:16Z", - "pushed_at": "2026-07-15T00:12:13Z", + "updated_at": "2026-07-15T05:38:57Z", + "pushed_at": "2026-07-15T05:38:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index d174403250..e86088f00b 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-07-15T00:26:31Z", - "pushed_at": "2026-07-15T00:26:27Z", + "updated_at": "2026-07-15T05:53:31Z", + "pushed_at": "2026-07-15T05:53:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0740.json b/2026/CVE-2026-0740.json index cff5d75925..b81dffe91b 100644 --- a/2026/CVE-2026-0740.json +++ b/2026/CVE-2026-0740.json @@ -125,10 +125,10 @@ "description": "CVE-2026-0740", "fork": false, "created_at": "2026-07-14T15:37:58Z", - "updated_at": "2026-07-14T15:45:56Z", + "updated_at": "2026-07-15T03:53:50Z", "pushed_at": "2026-07-14T15:40:32Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -139,7 +139,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-15409.json b/2026/CVE-2026-15409.json new file mode 100644 index 0000000000..e70fb0e484 --- /dev/null +++ b/2026/CVE-2026-15409.json @@ -0,0 +1,35 @@ +[ + { + "id": 1301123879, + "name": "CVE-2026-15409", + "full_name": "HORKimhab\/CVE-2026-15409", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-15409", + "description": "CVE-2026-15409 - Dectect", + "fork": false, + "created_at": "2026-07-15T02:30:50Z", + "updated_at": "2026-07-15T02:46:49Z", + "pushed_at": "2026-07-15T02:45:35Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-15410.json b/2026/CVE-2026-15410.json new file mode 100644 index 0000000000..1cd2f853f5 --- /dev/null +++ b/2026/CVE-2026-15410.json @@ -0,0 +1,35 @@ +[ + { + "id": 1301124507, + "name": "CVE-2026-15410", + "full_name": "HORKimhab\/CVE-2026-15410", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-15410", + "description": "CVE-2026-15410 - More: https:\/\/github.com\/HORKimhab\/poc-cve-collection", + "fork": false, + "created_at": "2026-07-15T02:31:47Z", + "updated_at": "2026-07-15T06:10:17Z", + "pushed_at": "2026-07-15T06:09:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 5fbb60dd57..23ad0cad74 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-07-15T00:41:18Z", - "pushed_at": "2026-07-15T00:41:14Z", + "updated_at": "2026-07-15T06:08:50Z", + "pushed_at": "2026-07-15T06:08:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-07-15T00:40:35Z", - "pushed_at": "2026-07-15T00:40:32Z", + "updated_at": "2026-07-15T06:08:07Z", + "pushed_at": "2026-07-15T06:08:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index eae29ec152..d52bdf5c93 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -59,8 +59,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-07-15T00:31:46Z", - "pushed_at": "2026-07-15T00:31:42Z", + "updated_at": "2026-07-15T05:58:58Z", + "pushed_at": "2026-07-15T05:58:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 0c28dec4aa..e4d00e724f 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-07-14T20:46:43Z", - "pushed_at": "2026-07-14T20:46:39Z", + "updated_at": "2026-07-15T06:25:50Z", + "pushed_at": "2026-07-15T06:25:46Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index e942e15f29..1277c5e81f 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -14,8 +14,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-07-15T00:43:28Z", - "pushed_at": "2026-07-15T00:43:25Z", + "updated_at": "2026-07-15T06:11:08Z", + "pushed_at": "2026-07-15T06:11:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index b9a63ad8c2..3c8448daa3 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-07-15T00:47:47Z", - "pushed_at": "2026-07-15T00:47:44Z", + "updated_at": "2026-07-15T06:15:53Z", + "pushed_at": "2026-07-15T06:15:37Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-27483.json b/2026/CVE-2026-27483.json new file mode 100644 index 0000000000..d8ee20f8b3 --- /dev/null +++ b/2026/CVE-2026-27483.json @@ -0,0 +1,35 @@ +[ + { + "id": 1301285761, + "name": "cve-2026-27483-lab", + "full_name": "nabhan-mohy\/cve-2026-27483-lab", + "owner": { + "login": "nabhan-mohy", + "id": 172956904, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172956904?v=4", + "html_url": "https:\/\/github.com\/nabhan-mohy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nabhan-mohy\/cve-2026-27483-lab", + "description": "A containerized enterprise-style lab for researching and defending against CVE-2026-27483.", + "fork": false, + "created_at": "2026-07-15T06:35:47Z", + "updated_at": "2026-07-15T06:46:57Z", + "pushed_at": "2026-07-15T06:46:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-27944.json b/2026/CVE-2026-27944.json index 19f7f7559d..8395adccbe 100644 --- a/2026/CVE-2026-27944.json +++ b/2026/CVE-2026-27944.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1301243832, + "name": "HTB-Snapped-Writeup", + "full_name": "Cosm3No1de\/HTB-Snapped-Writeup", + "owner": { + "login": "Cosm3No1de", + "id": 114448125, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114448125?v=4", + "html_url": "https:\/\/github.com\/Cosm3No1de", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Cosm3No1de\/HTB-Snapped-Writeup", + "description": "Writeup de la máquina Snapped (Hard) de Hack The Box. Foothold: CVE-2026-27944 — Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 — snapd race condition LPE Técnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.", + "fork": false, + "created_at": "2026-07-15T05:40:45Z", + "updated_at": "2026-07-15T05:51:41Z", + "pushed_at": "2026-07-15T05:51:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 6ce79fce12..502c9b07c3 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -723,8 +723,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-07-14T21:07:23Z", - "pushed_at": "2026-07-14T21:07:18Z", + "updated_at": "2026-07-15T06:45:30Z", + "pushed_at": "2026-07-15T06:45:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -772,8 +772,8 @@ "description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.", "fork": false, "created_at": "2026-05-06T09:49:14Z", - "updated_at": "2026-07-14T21:07:56Z", - "pushed_at": "2026-07-14T21:07:52Z", + "updated_at": "2026-07-15T06:46:33Z", + "pushed_at": "2026-07-15T06:46:04Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 87530113f3..dadfa0c0c0 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -14,8 +14,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-07-14T20:48:02Z", - "pushed_at": "2026-07-14T20:47:55Z", + "updated_at": "2026-07-15T06:27:06Z", + "pushed_at": "2026-07-15T06:27:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-34197.json b/2026/CVE-2026-34197.json index ec8d5cdd79..1825561621 100644 --- a/2026/CVE-2026-34197.json +++ b/2026/CVE-2026-34197.json @@ -14,10 +14,10 @@ "description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)", "fork": false, "created_at": "2026-04-20T02:38:50Z", - "updated_at": "2026-07-13T12:12:28Z", + "updated_at": "2026-07-15T01:36:22Z", "pushed_at": "2026-06-27T07:20:35Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 2 }, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 10219fd654..c8ae949f02 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-07-14T17:12:05Z", + "updated_at": "2026-07-15T03:13:54Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 855, - "watchers_count": 855, + "stargazers_count": 856, + "watchers_count": 856, "has_discussions": false, "forks_count": 125, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 125, - "watchers": 855, + "watchers": 856, "score": 0, "subscribers_count": 20 }, diff --git a/2026/CVE-2026-36669.json b/2026/CVE-2026-36669.json new file mode 100644 index 0000000000..5613681059 --- /dev/null +++ b/2026/CVE-2026-36669.json @@ -0,0 +1,35 @@ +[ + { + "id": 1301085933, + "name": "CVE-2026-36669-FengOffice", + "full_name": "firstlax6t\/CVE-2026-36669-FengOffice", + "owner": { + "login": "firstlax6t", + "id": 305296191, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305296191?v=4", + "html_url": "https:\/\/github.com\/firstlax6t", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/firstlax6t\/CVE-2026-36669-FengOffice", + "description": null, + "fork": false, + "created_at": "2026-07-15T01:25:56Z", + "updated_at": "2026-07-15T01:35:05Z", + "pushed_at": "2026-07-15T01:35:01Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index de3667c04b..4dcf249bf6 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -14,10 +14,10 @@ "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", "fork": false, "created_at": "2026-06-01T04:22:29Z", - "updated_at": "2026-07-13T12:13:11Z", + "updated_at": "2026-07-15T02:39:46Z", "pushed_at": "2026-06-02T08:30:55Z", - "stargazers_count": 207, - "watchers_count": 207, + "stargazers_count": 208, + "watchers_count": 208, "has_discussions": false, "forks_count": 67, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 67, - "watchers": 207, + "watchers": 208, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-41091.json b/2026/CVE-2026-41091.json index e16fae81c8..c578d03a74 100644 --- a/2026/CVE-2026-41091.json +++ b/2026/CVE-2026-41091.json @@ -14,10 +14,10 @@ "description": "CVE-2026-41091", "fork": false, "created_at": "2026-05-21T19:16:25Z", - "updated_at": "2026-07-12T08:46:30Z", + "updated_at": "2026-07-15T03:27:11Z", "pushed_at": "2026-05-21T19:28:46Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index b6819444d3..b0819230cf 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -258,8 +258,8 @@ "description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.", "fork": false, "created_at": "2026-05-06T18:08:48Z", - "updated_at": "2026-07-14T21:08:16Z", - "pushed_at": "2026-07-14T21:08:12Z", + "updated_at": "2026-07-15T06:46:44Z", + "pushed_at": "2026-07-15T06:46:26Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -576,12 +576,12 @@ "description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept", "fork": false, "created_at": "2026-06-28T07:13:52Z", - "updated_at": "2026-07-15T00:37:20Z", + "updated_at": "2026-07-15T06:46:33Z", "pushed_at": "2026-07-14T12:46:16Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 128, + "watchers_count": 128, "has_discussions": false, - "forks_count": 11, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -594,8 +594,8 @@ "cve-2026-41940-poc" ], "visibility": "public", - "forks": 11, - "watchers": 31, + "forks": 13, + "watchers": 128, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 68ffab8f13..6e959bb680 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -19,7 +19,7 @@ "stargazers_count": 105, "watchers_count": 105, "has_discussions": false, - "forks_count": 26, + "forks_count": 27, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 26, + "forks": 27, "watchers": 105, "score": 0, "subscribers_count": 1 @@ -151,7 +151,7 @@ "stargazers_count": 42, "watchers_count": 42, "has_discussions": false, - "forks_count": 19, + "forks_count": 20, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 19, + "forks": 20, "watchers": 42, "score": 0, "subscribers_count": 0 @@ -245,10 +245,10 @@ "description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k", "fork": false, "created_at": "2026-07-12T10:15:03Z", - "updated_at": "2026-07-14T23:23:30Z", + "updated_at": "2026-07-15T05:54:40Z", "pushed_at": "2026-07-12T14:08:59Z", - "stargazers_count": 136, - "watchers_count": 136, + "stargazers_count": 145, + "watchers_count": 145, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 39, - "watchers": 136, + "watchers": 145, "score": 0, "subscribers_count": 0 }, @@ -549,12 +549,12 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-07-15T00:40:43Z", + "updated_at": "2026-07-15T05:51:25Z", "pushed_at": "2026-07-14T16:28:49Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 2, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -562,8 +562,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 3, + "forks": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -599,5 +599,71 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1301107661, + "name": "Logitech-G-Cloud-GhostLock-CVE-2026-43499", + "full_name": "HYCQAQ\/Logitech-G-Cloud-GhostLock-CVE-2026-43499", + "owner": { + "login": "HYCQAQ", + "id": 75055152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75055152?v=4", + "html_url": "https:\/\/github.com\/HYCQAQ", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HYCQAQ\/Logitech-G-Cloud-GhostLock-CVE-2026-43499", + "description": "罗技云掌机 · GhostLock CVE-2026-43499 root 尝试", + "fork": false, + "created_at": "2026-07-15T02:03:56Z", + "updated_at": "2026-07-15T02:28:28Z", + "pushed_at": "2026-07-15T02:28:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1301177801, + "name": "duchamp-root", + "full_name": "Colorful-glassblock\/duchamp-root", + "owner": { + "login": "Colorful-glassblock", + "id": 194912369, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194912369?v=4", + "html_url": "https:\/\/github.com\/Colorful-glassblock", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Colorful-glassblock\/duchamp-root", + "description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration", + "fork": false, + "created_at": "2026-07-15T03:59:56Z", + "updated_at": "2026-07-15T04:28:08Z", + "pushed_at": "2026-07-15T04:28:04Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43724.json b/2026/CVE-2026-43724.json index 8de1d60a4d..2011a5d16d 100644 --- a/2026/CVE-2026-43724.json +++ b/2026/CVE-2026-43724.json @@ -14,12 +14,12 @@ "description": "CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs. ", "fork": false, "created_at": "2026-07-13T22:38:54Z", - "updated_at": "2026-07-15T00:29:58Z", + "updated_at": "2026-07-15T03:02:19Z", "pushed_at": "2026-07-13T22:40:03Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 11, + "forks": 4, + "watchers": 12, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index c69cbd0d28..cda89f58f3 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -212,8 +212,8 @@ "description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.", "fork": false, "created_at": "2026-06-16T07:21:36Z", - "updated_at": "2026-07-14T21:14:52Z", - "pushed_at": "2026-07-14T21:14:48Z", + "updated_at": "2026-07-15T03:44:14Z", + "pushed_at": "2026-07-15T03:44:10Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, @@ -264,10 +264,10 @@ "description": "yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubleshoot boot loop cmd unlock drive setup guide tutorial", "fork": false, "created_at": "2026-07-09T17:32:32Z", - "updated_at": "2026-07-15T00:50:21Z", + "updated_at": "2026-07-15T01:02:56Z", "pushed_at": "2026-07-09T18:43:42Z", - "stargazers_count": 154, - "watchers_count": 154, + "stargazers_count": 156, + "watchers_count": 156, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -299,7 +299,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 154, + "watchers": 156, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-48907.json b/2026/CVE-2026-48907.json index d857b10072..4323ffd633 100644 --- a/2026/CVE-2026-48907.json +++ b/2026/CVE-2026-48907.json @@ -283,7 +283,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -291,7 +291,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-50657.json b/2026/CVE-2026-50657.json new file mode 100644 index 0000000000..9dd37d2325 --- /dev/null +++ b/2026/CVE-2026-50657.json @@ -0,0 +1,46 @@ +[ + { + "id": 1301186839, + "name": "CVE-2026-50657", + "full_name": "NeseOS-Corp\/CVE-2026-50657", + "owner": { + "login": "NeseOS-Corp", + "id": 253272733, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/253272733?v=4", + "html_url": "https:\/\/github.com\/NeseOS-Corp", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NeseOS-Corp\/CVE-2026-50657", + "description": null, + "fork": false, + "created_at": "2026-07-15T04:14:04Z", + "updated_at": "2026-07-15T04:25:48Z", + "pushed_at": "2026-07-15T04:24:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": false, + "pull_request_creation_policy": "all", + "topics": [ + "10", + "11", + "7", + "8", + "cve", + "microsoft", + "neseos", + "vista", + "windows", + "xp" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-55511.json b/2026/CVE-2026-55511.json index 84d973d1ec..9f6b801182 100644 --- a/2026/CVE-2026-55511.json +++ b/2026/CVE-2026-55511.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/junfuture1103\/CVE-2026-55511", - "description": "CVE-2026-55511 poc", + "description": "Remote Code Execution (RCE) in Yamcs Mission Control System via Java Statement Injection in Yarch SQL Double-Quoted IdentifiersRemote Code Execution (RCE) in Yamcs Mission Control System via Java Statement Injection in Yarch SQL Double-Quoted Identifiers", "fork": false, "created_at": "2026-07-15T00:32:21Z", - "updated_at": "2026-07-15T00:40:10Z", - "pushed_at": "2026-07-15T00:40:05Z", + "updated_at": "2026-07-15T01:03:43Z", + "pushed_at": "2026-07-15T00:53:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/README.md b/README.md index 3ed8c3ea5f..4d7a6027c4 100644 --- a/README.md +++ b/README.md @@ -1288,6 +1288,20 @@ - [shinthink/CVE-2026-15282](https://github.com/shinthink/CVE-2026-15282) +### CVE-2026-15409 (2026-07-14) + +A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location. + + +- [HORKimhab/CVE-2026-15409](https://github.com/HORKimhab/CVE-2026-15409) + +### CVE-2026-15410 (2026-07-14) + +Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. + + +- [HORKimhab/CVE-2026-15410](https://github.com/HORKimhab/CVE-2026-15410) + ### CVE-2026-15706 - [musana/CVE-2026-15706](https://github.com/musana/CVE-2026-15706) @@ -1908,6 +1922,13 @@ - [xxconi/CVE-2026-27384](https://github.com/xxconi/CVE-2026-27384) +### CVE-2026-27483 (2026-02-24) + +MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the "Upload File" module, which corresponds to the API endpoint /api/files. Since the multipart file upload does not perform security checks on the uploaded file path, an attacker can perform path traversal by using `../` sequences in the filename field. The file write operation occurs before calling clear_filename and save_file, meaning there is no filtering of filenames or file types, allowing arbitrary content to be written to any path on the server. Version 25.9.1.1 patches the issue. + + +- [nabhan-mohy/cve-2026-27483-lab](https://github.com/nabhan-mohy/cve-2026-27483-lab) + ### CVE-2026-27495 (2026-02-25) n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbitrary code outside the sandbox boundary. On instances using internal Task Runners (default runner mode), this could result in full compromise of the n8n host. On instances using external Task Runners, the attacker might gain access to or impact other task executed on the Task Runner. Task Runners must be enabled using `N8N_RUNNERS_ENABLED=true`. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or use external runner mode (`N8N_RUNNERS_MODE=external`) to limit the blast radius. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures. @@ -1954,6 +1975,7 @@ - [BimaBalance/Cve-2026-27944-Tools-Exploit](https://github.com/BimaBalance/Cve-2026-27944-Tools-Exploit) +- [Cosm3No1de/HTB-Snapped-Writeup](https://github.com/Cosm3No1de/HTB-Snapped-Writeup) ### CVE-2026-27966 (2026-02-26) @@ -2670,6 +2692,9 @@ ### CVE-2026-36590 - [MoXie25/NanoMQ-Memory-Leak-Research](https://github.com/MoXie25/NanoMQ-Memory-Leak-Research) +### CVE-2026-36669 +- [firstlax6t/CVE-2026-36669-FengOffice](https://github.com/firstlax6t/CVE-2026-36669-FengOffice) + ### CVE-2026-36670 (2026-06-15) A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php. @@ -3441,6 +3466,8 @@ - [Bartixxx32/CVE-2026-43499-OnePlus15](https://github.com/Bartixxx32/CVE-2026-43499-OnePlus15) - [Linuxoid-cn/CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) - [qsvggff-spec/oppo-A5-PRO-5G-CVE-2026-43499](https://github.com/qsvggff-spec/oppo-A5-PRO-5G-CVE-2026-43499) +- [HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499](https://github.com/HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499) +- [Colorful-glassblock/duchamp-root](https://github.com/Colorful-glassblock/duchamp-root) ### CVE-2026-43500 (2026-05-11) @@ -4485,6 +4512,13 @@ - [g0thamRabb1t/CVE-2026-50656-rogueplanet-validation](https://github.com/g0thamRabb1t/CVE-2026-50656-rogueplanet-validation) - [0xBlackash/CVE-2026-50656](https://github.com/0xBlackash/CVE-2026-50656) +### CVE-2026-50657 (2026-07-14) + +Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. + + +- [NeseOS-Corp/CVE-2026-50657](https://github.com/NeseOS-Corp/CVE-2026-50657) + ### CVE-2026-50746 (2026-07-02) A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device. @@ -9573,6 +9607,7 @@ - [0x00Jeff/CVE-2025-27591](https://github.com/0x00Jeff/CVE-2025-27591) - [Stp1t/CVE-2025-27591](https://github.com/Stp1t/CVE-2025-27591) - [rippsec/CVE-2025-27591-Meta-below-LPE](https://github.com/rippsec/CVE-2025-27591-Meta-below-LPE) +- [MoTechStore/CVE-2025-27591-PoC](https://github.com/MoTechStore/CVE-2025-27591-PoC) ### CVE-2025-27607 (2025-03-07) @@ -14645,6 +14680,9 @@ - [m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit](https://github.com/m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit) +### CVE-2025-60357 +- [Nullbyte3117/CVE-2025-60357](https://github.com/Nullbyte3117/CVE-2025-60357) + ### CVE-2025-60424 (2025-10-27) A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack. @@ -43581,6 +43619,7 @@ - [engranaabubakar/CVE-2022-42889](https://github.com/engranaabubakar/CVE-2022-42889) - [sangrok-jeon/CVE-2022-42889-Analysis](https://github.com/sangrok-jeon/CVE-2022-42889-Analysis) - [KosmicOwl045/ICT287-CVE-2022-42889](https://github.com/KosmicOwl045/ICT287-CVE-2022-42889) +- [Hkaeeeer/CVE-2022-42889](https://github.com/Hkaeeeer/CVE-2022-42889) ### CVE-2022-42896 (2022-11-23)